Privacy Policy
This policy explains which personal data we collect when you visit moroccantraveltrips.com, send us a booking request or travel with us, why we need it, who receives it and how you can use your rights.
In short
- We only ask for what we need to answer you and to organise your tour.
- We never sell your data and we do not use it for anything you would not expect.
- Audience and advertising cookies are only used if you accept them.
- You can ask at any time to see, correct or delete your data by writing to [email protected].
Who is responsible for your data↑ Contents
The person responsible for processing your personal data is Mouhssine ELIOUJ, licensed tourist guide (GVCT 2898) and owner of moroccantraveltrips.com. When his company PROMYTHIC TOURS SARL AU provides or invoices part of your service, such as transport, it uses your data for that service under the same commitments.
Contact for any question about your data: [email protected], or by post to Jnan Awarrad, Ilot 14, Immeuble 04, Appt 13, 40100 Marrakech, Morocco.
The rules we follow↑ Contents
We process personal data in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data and its implementing decree No. 2-09-165, under the supervision of the CNDP (Commission nationale de contrôle de la protection des données à caractère personnel).
Because many of our guests live in the European Union or the United Kingdom, we also apply the principles and rights of the General Data Protection Regulation (GDPR) and of the UK GDPR when they concern you.
The data we collect↑ Contents
When you send a booking request
The booking form on our tour pages asks for your full name, your phone or WhatsApp number, your travel date, the number of adults and children, your preferred guide language and, if you wish, your email address and any special requests. We also record the date of your request and your agreement to this policy.
If you have accepted audience cookies, the request also keeps a note of how you reached the website (for example the referring website, a campaign name or a partner code). This helps us understand which channels bring us guests.
When you write or call us
When you use the contact form, send an email, call us or write on WhatsApp, we receive the details you give us, usually your name, contact details and message. The contact form is protected against spam by Google reCAPTCHA.
When you book and travel with us
To prepare your trip we may need extra information, such as your pick-up address (hotel or riad), your flight details for an airport transfer, the names of the travellers, and dietary needs or mobility constraints that matter for the tour. Please only share health information if it is useful for your safety or comfort. We also keep your booking confirmation, payments and, where issued, your invoice or digital Guest Pass.
When you browse the website
Our hosting and security providers record technical data such as your IP address, browser type, pages visited and the date and time of access. This is needed to deliver the pages and to protect the website against attacks. Cookies and similar technologies are explained in the Cookie Policy.
Photos and reviews
If you send us a review or photos of your trip, we only publish them with your permission. During tours, we only publish photos in which you can be recognised if you have agreed to it.
Why we use your data↑ Contents
| Purpose | Data used | Legal basis |
|---|---|---|
| Answer your request, advise you and prepare a quote | Request and contact details | Your request and your consent |
| Organise and deliver the services you booked | Booking, pick-up and traveller details | Performance of our agreement with you |
| Invoicing, accounting and tax obligations | Name, booking, payments, invoice | Legal obligation |
| Keep the website secure and block spam | Technical data, reCAPTCHA signals | Our legitimate interest |
| Measure the audience and the effect of our ads | Cookie identifiers, pages viewed, origin of the visit | Your consent, which you can withdraw at any time |
| Send you news or offers | Email or WhatsApp number | Only if you have agreed, and you can stop at any time |
Who receives your data↑ Contents
- Your guide and driver: Mouhssine ELIOUJ and, for transport, the staff of PROMYTHIC TOURS SARL AU.
- Independent partners who take part in your programme, such as hotels, riads, desert camps, activity providers or another licensed guide if we recommend one. They only receive what they need, for example names, number of travellers, dates and dietary needs.
- Technical providers: DigitalOcean (hosting), Cloudflare (network delivery and security), Google (Analytics, ad measurement and reCAPTCHA, according to your choices) and our email provider.
- Messaging services: when you write to us on WhatsApp, the service is provided by WhatsApp (Meta) under its own privacy policy.
- Public authorities, only when the law requires it.
We never sell or rent your personal data.
Data stored outside Morocco↑ Contents
Some of our providers store data outside Morocco, in particular in the United States and in Europe (DigitalOcean, Cloudflare and Google). These transfers are made within the framework set by Law No. 09-08 and the decisions of the CNDP. For guests covered by the GDPR, they rely on appropriate safeguards, such as the EU-U.S. Data Privacy Framework, in which these providers participate, or the standard contractual clauses of the European Commission.
How long we keep your data↑ Contents
| Data | Retention period |
|---|---|
| Request that did not lead to a booking | 12 months after our last exchange |
| Booking and customer file | 3 years after the end of your trip |
| Invoices and accounting documents | 10 years, as required by Moroccan accounting law |
| Cookies and their data | 6 months at most, see the Cookie Policy |
| Security logs | A short period, unless needed to investigate an incident |
At the end of these periods, the data is deleted or made anonymous.
Your rights↑ Contents
Under Law No. 09-08 you have the right to access your data, to have it corrected and to object to its processing for legitimate reasons, and to object free of charge to its use for marketing. You can withdraw your consent at any time. If the GDPR applies to you, you can also ask for your data to be erased, for its processing to be restricted and for a copy in a portable format.
To use your rights, write to [email protected]. We may ask you to confirm your identity. We reply within one month at the latest.
If you think your rights have not been respected, you can contact the CNDP (cndp.ma) or, if you live in the European Union, the data protection authority of your country.
How we protect your data↑ Contents
The website uses an encrypted connection (HTTPS), access to its administration is restricted and protected, and the software is kept up to date. Only the people who need your data to organise your trip can see it. No system is completely secure, but we act quickly if a problem occurs and we will inform you if it affects you.
We will never ask you to send your bank card details by email or WhatsApp.
Children↑ Contents
Bookings must be made by an adult. When children travel with you, we only ask for the information needed to organise the trip, such as their number and age, and they remain under the responsibility of the adult who booked. We do not knowingly collect data directly from children under 18.
Other websites and social networks↑ Contents
Our pages contain links to other services, such as Facebook, Instagram, WhatsApp or booking platforms. If you book one of our tours on a third-party platform, that platform also processes your data under its own policy. We encourage you to read the privacy policies of these services.
Changes to this policy↑ Contents
We may update this policy, for example when we add a new service or when the law changes. The date at the top of the page shows the latest version. If a change matters for you, we will tell you before it applies.